Enforce multi-tenant RBAC patterns across FocalizaHR API endpoints.
npx skills add https://github.com/FOCALIZAHR/focalizahr-mvp --skill focalizahr-api
Please help me install this Agent Skill. Skill: focalizahr-api Source: https://github.com/FOCALIZAHR/focalizahr-mvp/tree/main/.claude/skills/focalizahr-api Command: npx skills add https://github.com/FOCALIZAHR/focalizahr-mvp --skill focalizahr-api
This skill provides standardized, security-first patterns for building FocalizaHR APIs, ensuring multi-tenant data isolation and consistent RBAC enforcement across endpoints.
Configure a new API endpoint to extract the user context, enforce permissions, apply hierarchical access filters, and perform a multi-tenant safe database operation.
High-intent search queries and answers about installing and using this skill.
Secure multi-tenant API endpoints by extracting user context, verifying permissions via hasPermission, and applying hierarchical filters. This ensures strict data isolation across all GET, POST, PUT, and DELETE operations.
Hierarchical access filtering uses getChildDepartmentIds and roles like AREA_MANAGER to scope query results dynamically. It restricts data visibility to authorized departments while allowing GLOBAL_ACCESS_ROLES for cross-tenant access.
Prevent data leaks by applying accountId enforcement to all database queries and avoiding insecure endpoint configurations. Following established anti-pattern references ensures multi-tenant data isolation across all operations.
Yes, you can implement secure multi-tenant RBAC patterns using TypeScript and Prisma. The approach integrates authorization functions and access filters into backend services to ensure safe, paginated database operations.
Your API returns unauthorized data because accountId enforcement is missing from database queries. You must apply hierarchical access filters and use extractUserContext on every request to maintain strict tenant isolation.
dadbodgeoffImplement multi-tenant architecture with tenant isolation and automated query scoping.
ludsonaielloIdentify backend code violations against contracts and platform standards.
jon23dEnforce tenant isolation in TypeScript apps with Fastify, Prisma, and PostgreSQL.
VictorSmaniottoImplement Laravel RBAC with Guards, Policies, Gates, and Spatie permissions.
